s302.secure.ne.jp

- KDDI Web Communications Inc. -

Issued by Servision Certification Authority

About this certificate

This digital certificate with serial number 78:54:7a:c4:5e:62:bc:ed was issued on by Servision Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KDDI Web Communications Inc.

Organization: KDDI Web Communications Inc.
State / Province: Hosting Service
Locality: Instant CPI SSL
Country: JP

Servision Inc.

Organization: Servision Inc.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 78:54:7a:c4:5e:62:bc:ed
Serial Number (int): 8670690166410755309
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: e4:3c:c8:6c:3d:ce:23:2b:1d:e8:28:95:53:5c:7e:44:60:90:80:e6
AuthorityKeyId: 04:35:f9:47:b1:ee:2b:a2:55:09:ae:30:5b:b7:90:ca:ac:57:5d:c7

Fingerprint (sha1): cd:36:55:4e:3d:23:48:44:5f:9c:4b:fe:08:bc:8d:f7:9c:12:47:9f
Fingerprint (sha256): 05:13:ef:c6:32:30:59:6c:1c:dc:9e:8e:8a:a1:cd:ec:4f:0d:e6:cc:e9:d3:f8:c3:b4:fd:44:e8:99:ab:20:a5


Revocation information

CRL Distribution Point: http://repo1.secomtrust.net/sppca/servision/fullCRL.crl

Check the revocation status for certificate s302.secure.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s302.secure.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s302.secure.ne.jp

Other certificates including the domain name secure.ne.jp

(limited to 100 certificates)
x173.secure.ne.jp
s190.secure.ne.jp
s127.secure.ne.jp
x347.secure.ne.jp
xb202.secure.ne.jp
x480.secure.ne.jp
staging.sr.secure.ne.jp
xb301.secure.ne.jp
x346.secure.ne.jp
m209.secure.ne.jp
x130.secure.ne.jp
g302.secure.ne.jp
xa124.secure.ne.jp
z106.secure.ne.jp
xa131.secure.ne.jp
x346.secure.ne.jp
x266.secure.ne.jp
s118.secure.ne.jp
aa222.secure.ne.jp
m211.secure.ne.jp
s208.secure.ne.jp
s402.secure.ne.jp
gt201.secure.ne.jp
s102001.secure.ne.jp
s301.secure.ne.jp
z143.secure.ne.jp
cvps-158-199-195-137.secure.ne.jp
s138.secure.ne.jp
s125.secure.ne.jp
gt161.secure.ne.jp
g630.secure.ne.jp
x156.secure.ne.jp
xb102.secure.ne.jp
xa130.secure.ne.jp
g640.secure.ne.jp
aa107.secure.ne.jp
m204.secure.ne.jp
x601.secure.ne.jp
x176.secure.ne.jp
m128.secure.ne.jp
z203.secure.ne.jp
x180.secure.ne.jp
s105.secure.ne.jp
gt161.secure.ne.jp
chm11ztest.secure.ne.jp
aa118.secure.ne.jp
gt401.secure.ne.jp
s129.secure.ne.jp
xa109.secure.ne.jp
s204.secure.ne.jp
xa113.secure.ne.jp
g108.secure.ne.jp
s128.secure.ne.jp
x190.secure.ne.jp
m123.secure.ne.jp
xa113.secure.ne.jp
xb106.secure.ne.jp
gt106.secure.ne.jp
s120.secure.ne.jp
x106.secure.ne.jp
zz131.secure.ne.jp
x441.secure.ne.jp
z301.secure.ne.jp
xa132.secure.ne.jp
x270.secure.ne.jp
xa120.secure.ne.jp
s302.secure.ne.jp
xb116.secure.ne.jp
xb203.secure.ne.jp
g402.secure.ne.jp
s126.secure.ne.jp
gt302.secure.ne.jp
gt109.secure.ne.jp
aa194.secure.ne.jp
x150.secure.ne.jp
aa156.secure.ne.jp
*.secure.ne.jp
x279.secure.ne.jp
gt503.secure.ne.jp
xa138.secure.ne.jp
information.secure.ne.jp
g643.secure.ne.jp
s109.secure.ne.jp
s121.secure.ne.jp
gt401.secure.ne.jp
x250.secure.ne.jp
x274.secure.ne.jp
x173.secure.ne.jp
x280.secure.ne.jp
z141.secure.ne.jp
z303.secure.ne.jp
m117.secure.ne.jp
g636.secure.ne.jp
gt161.secure.ne.jp
s108.secure.ne.jp
xa112.secure.ne.jp
m139.secure.ne.jp
g109.secure.ne.jp
g303.secure.ne.jp
s106.secure.ne.jp

Certificate

The complete raw certificate details for s302.secure.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i6gy0zP/NbnK0tmgEsv
98HevgoDZnXZlEj3SWMJRDYBlQ5/dRdkhU4aoL1SHobtrqRxGiRDLdS3hsswDmFG
NiSu9EX/ZQH5hMn4IOebnSmz7j+5ThrqQbmTwzooJNboOG4Ouq1xqCMkRyoT9dzF
BlnQyp3t4hMtVzUwb5sLINux9c6jBLV0SBh0VcpMNseZ6z3/m3P4011OTJ0S0PHS
F+4y522vtzLywBrWN//jSMo18JslyuTpLSiosm0wa7ThBJCSUhwE0BLcIwB3EhXi
RNqhbk+yUTv+6AC5sRrR/T8edJhhF4r8sVGqkjtai62NbysQK5HCOBnE1x8oqc+/
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8670690166410755309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servision Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-29 08:25:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-12 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instant CPI SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KDDI Web Communications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's302.secure.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27037990436855583030930887680050413858157393054459031477786515419577397598006888789138584957096344525140109108675125247460004409547177511872862786054702284139813450583468385638010705539543210847143970032230232298718755170113400373012096116126204945069417048217620258843662373821063329733351372065731440153820854796318576584662521271448374345508214911685787120419103418314280600521428301512757095768988886712446344262356043044241705742111431041201245748213051455357906654689332091940406731332463695812160830611300695637146385249894018789934159213927558991922025018738839170412715445280154186676840336379386703079522111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e43cc86c3dce232b1de82895535c7e44609080e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0435f947b1ee2ba25509ae305bb790caac575dc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's302.secure.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.141.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/servision/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/servision/fullCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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